Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
File: ES1lq7x-8AUScohER5KrhvsVwu4.mft (raw, json)
Hash identifier: vZGUn+BnjT6RMQN63B4q3qzuy2a55662PUL0gES/Pik=
Subject key identifier: 86:0E:3A:9F:FA:B2:44:E1:51:45:82:C6:85:C1:8D:45:99:36:F6:1D
Authority key identifier: 11:2D:65:AB:BC:7E:F0:05:12:72:88:44:47:92:AB:86:FB:15:C2:EE
Certificate issuer: /CN=112d65abbc7ef005127288444792ab86fb15c2ee
Certificate serial: 01A183AD40386CE16493D2868C1D6AF5E03B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
Manifest number: 0C4B
Signing time: Wed 28 Oct 2026 18:02:11 +0000
Manifest this update: Wed 28 Oct 2026 18:02:11 +0000
Manifest next update: Thu 29 Oct 2026 18:02:11 +0000
Files and hashes: 1: ES1lq7x-8AUScohER5KrhvsVwu4.crl (hash: CPKpxu1wNFXHV5bhEJcvx9TzDiPckV8pDHQiKGcc08c=)
2: NyqJ3HcC-3DqTRjPEZHaf1vVpmk.roa (hash: kzMbI7FhKbCR9OfECdQk1NAYRQo9Ic9dt4s+QetZXtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 18:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:ad:40:38:6c:e1:64:93:d2:86:8c:1d:6a:f5:e0:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112d65abbc7ef005127288444792ab86fb15c2ee
Validity
Not Before: Oct 28 18:02:11 2026 GMT
Not After : Oct 29 18:02:11 2026 GMT
Subject: CN=860e3a9ffab244e1514582c685c18d459936f61d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:be:c1:64:84:41:54:0f:5a:10:f3:72:a5:71:
93:8b:ca:67:e8:d8:4e:c5:92:60:8f:02:9e:41:b7:
12:9a:46:d5:9d:f1:3a:1a:bc:01:f2:fc:49:06:2a:
4d:b1:46:19:25:93:62:42:b1:a9:fc:28:bf:c0:35:
bd:c1:f9:28:ca:27:5b:5e:8d:7b:e6:d3:65:d0:f6:
48:0c:79:31:b1:05:4d:5b:f9:e9:4c:05:8a:68:4f:
9b:14:8d:a2:1d:80:69:4d:ec:4b:33:4e:72:9b:78:
a9:4d:90:fd:cf:2d:2a:54:9f:9c:81:9e:e7:0d:64:
48:1b:2f:48:fa:c9:86:94:2b:63:d3:64:dc:a0:39:
68:45:27:3f:f7:da:5c:90:a3:62:42:31:c2:af:5e:
9b:9a:cb:26:5c:05:db:a9:b6:82:9c:41:9a:97:f7:
9c:cb:5f:aa:97:33:59:9f:a4:f0:8f:ad:45:d3:84:
66:0a:37:bd:19:05:be:64:0b:82:e6:7f:97:6b:c1:
34:0a:73:98:f6:93:2b:5b:91:2f:b3:ec:2f:5a:cf:
d0:c1:01:17:47:12:fb:5a:70:30:61:c7:fa:86:5b:
97:ed:20:40:51:73:7d:91:42:e7:88:75:9c:94:1c:
1f:0e:12:0f:13:4f:09:22:db:a5:4b:7b:9e:f1:3e:
6c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:0E:3A:9F:FA:B2:44:E1:51:45:82:C6:85:C1:8D:45:99:36:F6:1D
X509v3 Authority Key Identifier:
keyid:11:2D:65:AB:BC:7E:F0:05:12:72:88:44:47:92:AB:86:FB:15:C2:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:31:36:36:29:f0:87:2e:d4:29:87:71:aa:f9:ed:04:b6:a1:
a4:db:f7:a4:c6:5a:04:eb:ce:97:fd:2d:95:0c:f1:f6:e9:0c:
dd:f1:24:5c:21:63:fb:17:be:1e:af:43:fe:27:90:8f:0a:33:
85:c3:e7:2e:14:ea:14:39:16:dc:93:3f:1c:fb:7b:25:9a:32:
6e:ee:12:78:6e:9e:af:16:d4:81:5e:e9:5d:cf:13:25:90:22:
0a:92:05:55:c3:da:3f:93:14:2c:31:eb:5b:34:f7:cb:91:d8:
ca:bb:64:b0:d9:f0:9d:0b:c5:7c:d4:b6:77:da:fe:fb:0f:57:
68:66:ba:dc:e2:af:fd:28:12:ef:6f:d3:d1:7d:cf:4f:fe:cf:
4b:dc:87:53:2c:66:89:1c:ed:64:e9:81:1f:66:eb:05:50:f0:
0f:35:7e:a9:8b:0a:29:7d:9b:e9:8e:a7:ed:4b:c6:6c:ea:f7:
1f:ca:87:e1:98:bd:4e:58:3a:ac:78:c4:3e:35:fe:08:35:61:
26:2a:f6:a7:16:4c:45:a2:3b:df:d0:bb:1e:5b:d8:ff:33:a3:
b4:c7:55:18:05:42:6f:a8:65:4c:dd:48:d4:7b:03:32:1c:eb:
e8:78:7f:4e:ee:81:31:56:83:51:ed:96:ae:99:11:65:28:1a:
84:6f:9b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:51:42 2026 by rpki-client